Details of VAR-201711-0650

ID

VAR-201711-0650

CVE

CVE-2017-5711

TITLE

Intel Manageability Engine Firmware of Active Management Technology Buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2017-010467

DESCRIPTION

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege. Intel Manageability Engine The Intel Management Engine is Intel's thermal management driver for its desktop family of chipsets. Failed exploit attempts will likely result in denial-of-service conditions. Intel Manageability Engine versions 8.x, 9.x, 10.x, 11.0,11.5,11.6,11.7,11.10, and 11.20 are vulnerable. Intel Xeon Processor E3-1200 and others are CPUs (Central Processing Units) of Intel Corporation. Active Management Technology (AMT) is one of the active management components. The following products and versions are affected: Intel Manageability Engine Firmware Versions 8.x, 9.x, 10.x, 11.0, 11.5, 11.6, 11.7, 11.10, 11.20; 6th, 7th, and 8th Generation Intel Core Processor Family; Intel Xeon Processor E3-1200 v5 and v6 Product Family; Intel Xeon Processor Scalable Family; Intel Xeon Processor W Family; Intel Atom C3000 Processor Family; Apollo Lake Intel Atom Processor E3900 series; Apollo Lake Intel Pentium; Celeron N and J series Processors

Trust: 2.7

sources: NVD: CVE-2017-5711 // JVNDB: JVNDB-2017-010467 // CNVD: CNVD-2017-37851 // BID: 101918 // IVD: e2e04451-39ab-11e9-b6f1-000c29342cb1 // VULHUB: VHN-113914

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: e2e04451-39ab-11e9-b6f1-000c29342cb1 // CNVD: CNVD-2017-37851

AFFECTED PRODUCTS

vendor:	intel	model:	manageability engine	scope:	eq	version:	11.7	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.6	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.5	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.20	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.10	Trust: 2.5
vendor:	intel	model:	manageability engine	scope:	eq	version:	11.0	Trust: 2.5
vendor:	intel	model:	active management technology	scope:	eq	version:	-	Trust: 1.6
vendor:	asus	model:	z170 pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150-v7	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150m-v5	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-p d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250m-v5	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix hero	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc847c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	prime h110m-p	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simotion p320-4s	scope:	lt	version:	17.02.06.83.1	Trust: 1.0
vendor:	asus	model:	rog maximus x hero	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h270-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime q270m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170-pro\/usb 3.1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-k d3	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic field pg m3	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	h170i-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270-p	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250m-f plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170t	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-cs x	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h110m2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250m-c pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-v plus	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	gte	version:	10.0.0.0	Trust: 1.0
vendor:	asus	model:	h110m-ts	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250h gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z370-pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-ks r1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150i pro gaming\/wifi\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110t	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus x apex	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	trooper h110 d3	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc547e	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	rog maximus viii ranger	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	gte	version:	9.0.0.0	Trust: 1.0
vendor:	asus	model:	b150m-f plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	sabertooth z170 s	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-c\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc547d	scope:	lt	version:	7.1.91.3272	Trust: 1.0
vendor:	asus	model:	prime z370-p	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-c d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q270m-cm-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270g gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-p\/dvi	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	sabertooth z170 mark 1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	gte	version:	8.0.0.0	Trust: 1.0
vendor:	asus	model:	trooper b150 d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-cs\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	sinumerik pcu50.5-p	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	prime z270-k	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc477e	scope:	lt	version:	21.01.07	Trust: 1.0
vendor:	asus	model:	h170m-e d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150 pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii extreme	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-plus d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-f	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-e	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix h270f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc827c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	h110m-c2\/tf	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc477d pro	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc847d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	b250 mining expert	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170 pro gaming\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170i pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-cs	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250-v7	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150m-v3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-d\/exper\/si	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c\/hdmi	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z370-plus gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	pio-b250i	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a\/m.2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-e\/m.2	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc677d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	ex-h110m-v3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150 pro gaming\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix code	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170t v2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-p	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h270m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-pro	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270h gaming\/k1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc627d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	b150m pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-premium	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-a\/m.2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-a d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-e gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc647d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	b150m-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250-mr	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic field pg m4	scope:	lt	version:	18.01.06	Trust: 1.0
vendor:	asus	model:	q270-s	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime h110m2\/fpt	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250m-plus\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150 pro gaming d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix formula	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc427d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250m-v	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc827d	scope:	lt	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	prime h270-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix extreme	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b250m-v3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix h270i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c\/ps	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z270-ar	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110i-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime z370-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b250-s	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-h gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-ks	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic itp1000	scope:	lt	version:	23.01.03	Trust: 1.0
vendor:	asus	model:	q170m-cm-b	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii impact	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270h gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-g gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270i gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170m-e d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250g gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-a	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc677c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	siemens	model:	simatic ipc477d	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z370-f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-a\/dp	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z270 mark 1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii hero	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus x formula	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170m2\/cdm\/si	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170 pro gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-b150m-v	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110s2	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	lte	version:	8.1.71.3608	Trust: 1.0
vendor:	asus	model:	rog maximus viii hero alpha	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150m-k d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150i pro gaming\/aura	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170m-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170-plus d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	pio-b150m	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h170m-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus x code	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-deluxe	scope:	eq	version:	-	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	lte	version:	9.1.41.3024	Trust: 1.0
vendor:	asus	model:	prime b250m-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	b150-pro d3	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime j3355i-c	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii formula	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus viii gene	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc647c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	siemens	model:	simatic ipc427e	scope:	lt	version:	21.01.07	Trust: 1.0
vendor:	asus	model:	prime b250m-j	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270e gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	sinumerik pcu50.5-c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	asus	model:	h110m-r	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic field pg m5	scope:	lt	version:	22.01.04	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	lte	version:	10.0.55.3000	Trust: 1.0
vendor:	asus	model:	h110s1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix z270f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	ex-h110m-v	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170s1	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	q170m2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-k	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	z170-ar	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	tuf z270 mark 2	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-c\/br	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-k x	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	prime b250-plus	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog maximus ix apex	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	rog strix b250f gaming	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110t-a	scope:	eq	version:	-	Trust: 1.0
vendor:	asus	model:	h110m-e	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	simatic ipc627c	scope:	lt	version:	6.2.61.3535	Trust: 1.0
vendor:	intel	model:	manageability engine	scope:	eq	version:	9.0	Trust: 0.9
vendor:	intel	model:	manageability engine	scope:	eq	version:	8.0	Trust: 0.9
vendor:	intel	model:	manageability engine	scope:	eq	version:	10.0	Trust: 0.9
vendor:	intel	model:	active management technology	scope:	-	version:	-	Trust: 0.8
vendor:	intel	model:	manageability engine	scope:	-	version:	-	Trust: 0.8
vendor:	manageability engine	model:	-	scope:	eq	version:	*	Trust: 0.6
vendor:	manageability engine	model:	-	scope:	eq	version:	11.0	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.5	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.6	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.7	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.10	Trust: 0.2
vendor:	manageability engine	model:	-	scope:	eq	version:	11.20	Trust: 0.2
vendor:	active management	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: e2e04451-39ab-11e9-b6f1-000c29342cb1 // CNVD: CNVD-2017-37851 // BID: 101918 // JVNDB: JVNDB-2017-010467 // CNNVD: CNNVD-201711-881 // NVD: CVE-2017-5711

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-5711
value:	HIGH
Trust: 1.0
NVD:	CVE-2017-5711
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2017-37851
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201711-881
value:	HIGH
Trust: 0.6
IVD:	e2e04451-39ab-11e9-b6f1-000c29342cb1
value:	HIGH
Trust: 0.2
VULHUB:	VHN-113914
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2017-5711
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2017-37851
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	e2e04451-39ab-11e9-b6f1-000c29342cb1
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-113914
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-5711
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2017-5711
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: IVD: e2e04451-39ab-11e9-b6f1-000c29342cb1 // CNVD: CNVD-2017-37851 // VULHUB: VHN-113914 // JVNDB: JVNDB-2017-010467 // CNNVD: CNNVD-201711-881 // NVD: CVE-2017-5711

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-113914 // JVNDB: JVNDB-2017-010467 // NVD: CVE-2017-5711

THREAT TYPE

local

Trust: 0.9

sources: BID: 101918 // CNNVD: CNNVD-201711-881

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201711-881

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-010467

PATCH

title:	INTEL-SA-00086	url:	https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr	Trust: 0.8
title:	NTAP-20171120-0001	url:	https://security.netapp.com/advisory/ntap-20171120-0001/	Trust: 0.8
title:	Intel Manageability Engine has multiple patches for local buffer overflow vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/111455	Trust: 0.6
title:	Multiple Intel product Manageability Engine Firmware Buffer error vulnerability fix	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=76613	Trust: 0.6

sources: CNVD: CNVD-2017-37851 // JVNDB: JVNDB-2017-010467 // CNNVD: CNNVD-201711-881

EXTERNAL IDS

db:	NVD	id:	CVE-2017-5711	Trust: 3.6
db:	BID	id:	101918	Trust: 2.6
db:	SECTRACK	id:	1039852	Trust: 1.7
db:	SIEMENS	id:	SSA-892715	Trust: 1.7
db:	CNNVD	id:	CNNVD-201711-881	Trust: 0.9
db:	CNVD	id:	CNVD-2017-37851	Trust: 0.8
db:	JVNDB	id:	JVNDB-2017-010467	Trust: 0.8
db:	IVD	id:	E2E04451-39AB-11E9-B6F1-000C29342CB1	Trust: 0.2
db:	VULHUB	id:	VHN-113914	Trust: 0.1

sources: IVD: e2e04451-39ab-11e9-b6f1-000c29342cb1 // CNVD: CNVD-2017-37851 // VULHUB: VHN-113914 // BID: 101918 // JVNDB: JVNDB-2017-010467 // CNNVD: CNNVD-201711-881 // NVD: CVE-2017-5711

REFERENCES

url:	https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00086&languageid=en-fr	Trust: 2.5
url:	http://www.securityfocus.com/bid/101918	Trust: 1.7
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf	Trust: 1.7
url:	https://security.netapp.com/advisory/ntap-20171120-0001/	Trust: 1.7
url:	https://www.asus.com/news/wzeltg5cjyaiwgj0	Trust: 1.7
url:	http://www.securitytracker.com/id/1039852	Trust: 1.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-5711	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-5711	Trust: 0.8
url:	http://www.intel.com/content/www/us/en/homepage.html	Trust: 0.3
url:	https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00086&languageid=en-fr	Trust: 0.1

sources: CNVD: CNVD-2017-37851 // VULHUB: VHN-113914 // BID: 101918 // JVNDB: JVNDB-2017-010467 // CNNVD: CNNVD-201711-881 // NVD: CVE-2017-5711

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 101918

SOURCES

db:	IVD	id:	e2e04451-39ab-11e9-b6f1-000c29342cb1
db:	CNVD	id:	CNVD-2017-37851
db:	VULHUB	id:	VHN-113914
db:	BID	id:	101918
db:	JVNDB	id:	JVNDB-2017-010467
db:	CNNVD	id:	CNNVD-201711-881
db:	NVD	id:	CVE-2017-5711

LAST UPDATE DATE

2024-08-14T13:29:32.680000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-37851	date:	2017-12-22T00:00:00
db:	VULHUB	id:	VHN-113914	date:	2018-05-11T00:00:00
db:	BID	id:	101918	date:	2017-12-19T22:00:00
db:	JVNDB	id:	JVNDB-2017-010467	date:	2017-12-14T00:00:00
db:	CNNVD	id:	CNNVD-201711-881	date:	2023-05-23T00:00:00
db:	NVD	id:	CVE-2017-5711	date:	2023-05-22T16:18:57.140

SOURCES RELEASE DATE

db:	IVD	id:	e2e04451-39ab-11e9-b6f1-000c29342cb1	date:	2017-12-22T00:00:00
db:	CNVD	id:	CNVD-2017-37851	date:	2017-12-22T00:00:00
db:	VULHUB	id:	VHN-113914	date:	2017-11-21T00:00:00
db:	BID	id:	101918	date:	2017-11-20T00:00:00
db:	JVNDB	id:	JVNDB-2017-010467	date:	2017-12-14T00:00:00
db:	CNNVD	id:	CNNVD-201711-881	date:	2017-11-22T00:00:00
db:	NVD	id:	CVE-2017-5711	date:	2017-11-21T14:29:00.510